NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Apr 29, 2012@nhoclesnar
Yeah. I asked a similar question: Can he let people with permissions be able to execute Nodus commands, like the hacker types them. He said no, because the Hack commands aren't chat, they're client. There's some Java thing he used, but I forgot :P
-
View User Profile
-
Send Message
Posted Apr 29, 2012Neat can you log the -ihak types of command? MANY people out there use hack, and I think this is the best way to detect hack!
-
View User Profile
-
Send Message
Posted Apr 29, 2012Well I'm here replying to people again. Just trying to help Neat a bit :)
@Tobseb
What shall that awesome fly hack be? There should be no fly hack rather than creative fly works.
@nicka1011
Confirmed.
@aviator1014
If you want to disable mods, then you should leave them true. False means allowing mods.
@Jokaru
The format is log:string:delay:repeat:target. You should read the Instructions.txt.
@np98765
Confirmed. I'm trying to help him replying so that when he got back he can work on the plugin right away :D
@Lyndon321
Try what Jokaru said.
@UnitedFactions
Yes confirmed. Also, forcefield hack can do one more thing. If you are using a chest, and a monster walked up behind you, you will automatically attack it. Forcefield in some cases is both Reach and Direction. Noswing too I guess...
@MyPictures
I would recommend disable it. It already cannot stop MOST of the fly hacks anyway.
@Zcelo12
Try 'nocheatplus.mods.smartmoving'
Nocheat+ no longer requires .* anymore.
-
View User Profile
-
Send Message
Posted Apr 29, 2012Hey, When I put nocheatplus.mods.smartmoving.* in my permission-file from PermissionEx i can't grab. Any suggestions?
-
View User Profile
-
Send Message
Posted Apr 29, 2012@WhiteNightFury
emm idk... use the inbuilt fly check from minecraft? lol (server.proprieties)
-
View User Profile
-
Send Message
Posted Apr 29, 2012@Tobseb
Then you have wrong config/permissions or the players are in creative?. NoCheat+ is able to block EVERY FLY HACK out there.
-
View User Profile
-
Send Message
Posted Apr 29, 2012Hi Neatmonster, I had a idea, there is this reachack, and forcefield hack, that lets you hit other players from a longer distance then just 5 blocks.
Maybe you can add a check in your plugin that if distance= more then 5, cancel fight action. This will most likely in my opinion stop all hacks, so if the distance of the player that is getting hit is more then 5 blocks. It is a hack client.
Do you see what I mean?
Hope to hear from you soon!
Greetings
SupaYoshi
-
View User Profile
-
Send Message
Posted Apr 29, 2012@Tobseb
Ban them?
-
View User Profile
-
Send Message
Posted Apr 28, 2012@Lyndon321
try to off arrivalslimit
-
View User Profile
-
Send Message
Posted Apr 28, 2012Ok I have a question. A lot of my players (Mods and VIP included) get disconnected from the server and then have to wait 3minutes or 5 minutes before they can log back in. How do I disable this?
-
View User Profile
-
Send Message
Posted Apr 28, 2012Hey NeatMonster,
Sorry for posting this... You're going to come back to dozens of comments :P
I was wondering if you could add a... Bugfix, I guess. It's basically where the user can glitch through locked doors or teleport to the surface above them.
I believe it's just based on how Minecraft stores last player position... Not sure.
Not even sure if this can/should be implemented. Just a nice "cheat" (not a hack. A cheat) fix.
-
View User Profile
-
Send Message
Posted Apr 28, 2012Hi. Can any tell me what is this "0:5" in config file "log:waterwalk:0:5:if" ? THX
-
View User Profile
-
Send Message
Posted Apr 28, 2012There are two sections in the config for allowing the use of client mods, I have them both set to false, but I can still xray and fly with CJB when I don't have SBC installed.
-
View User Profile
-
Send Message
Posted Apr 28, 2012Btw Without Op Players Can Be Pushed To Clip Into Blocks. -Nicka101
-
View User Profile
-
Send Message
Posted Apr 28, 2012With a new Flyhack some of my Users are able to fly arround the whole World...
What should I do now?
-
View User Profile
-
Send Message
Posted Apr 27, 2012Ok since the author said he's gone for a few days, imma try to reply to some people to help them out.
Guys, if you are experiencing problems, the first thing you should try is to regenerate NoCheat+ config.yml.
@deleted_7536780
Maybe you should check the OpenInv page again. Someone claimed that it works for them. Have you tried to test it for yourself yet?
@xeNiums
X-ray is not totally prevented by NoCheat+. You should check out Orebfuscator. It's the best anti X-ray out there, trust me. If you would like to prevent X-ray even further, you can add FoundDiamonds to your plugins list.
@darkknightcz
Can you be more specific? I tried what you say and it worked for me. While I was stuck in nets, I tried destroying cobwebs with sword and breaking nearby blocks with pickaxe. No fly error was logged.
@rodins
I tried the exact same thing as you did, and it worked fine. However, I suggest one thing. You should reduce the permission node to:
That's enough if you want users in that group to bypass all checks.
@JPieMC
True, if you don't use the right permission. For example, if you give someone
then that still won't be able to fly. However, if you give him this
then that player will be able to fly. Make sure you have the right permission(s). If it still doesn't work for you then maybe you should recheck your perm plugin config.
-
View User Profile
-
Send Message
Posted Apr 27, 2012None of my allow nodes work, and yes I checked that I'm not being an idiot.
-
View User Profile
-
Send Message
Posted Apr 27, 2012@NeatMonster
i want them to be able to fly for 10 seconds, after which they get kicked
-
View User Profile
-
Send Message
Posted Apr 27, 2012This is great! I was so worried about NoCheat going away..... And then I found YOU!
-
View User Profile
-
Send Message
Posted Apr 27, 2012when player gets stuck in net, it shows error moving.flying (when he tries to break some block)